itsecurityideas

“Hephaestus created Hermes winged helment and sandals, the Aegis breastplate, Aphrodite’s famed girdle and Agamemmnon’s staff of office.” ~ IIlad II Homer The software model used predicates the architecture of the application, its use and design and generally how easily the software may be maintained and updated through its life-cycle. There are many formal software models that have been developed; the most popular is the Waterfall, there is also Agile, Big Design, Chaos, Iterative, Rapid Applciation Development, Bhoem Spiral, V-Model’s. [i]   There are as many methodologies as there are models to software development, these include Agile, Clean room, Iterative, RAD, RUP, Spiral, Waterfall, XP, Lean, Scrum, V-Model and TDD. [ii] Each of these models have their respective strength’s and weakness; the analysis of all of them would be far too comprehensive for discussion; AJAX being developed by developers trained to use these models however is closer as a methodology to XP, AGILE, R...

Web services are defined as any service or function delivered via hypertext transfer protocol (HTTP) offered via the Internet and executed remotely i . Service Oriented Architecture is defined as a flexible set of design principles used during the phases of and integration within the software development life-cycle of which XML and JSON are commonly used but not required for service coupling. ii The current state of web-development for most popular web-applications is based on “Foundational Technologies”; a foundational technology is defined as any technology that becomes a base requirement to enable any other technology. Real world examples include how the current state of the multi-billion dollar produce and food industry rely solely upon widespread cheap and available refrigeration and the national and international power grids to maintain product stocks both in warehouses and during shipping to the grocers. If the North American power grid fails; all grocers have blackout sales of ...

A data warehouse is defined as the collective content of a collection of databases; usually normalized and sanitized in the process of moving out of an operational database into the data warehouse. It's primary use is for reporting and business intelligence. i Data-warehousing on the web, or using a cloud to host the data-warehouse presents a number of issues and risks we have listed them in no specific order; Privacy Within the United States, Canada and most G8 countries there exists legislation that is enacted to protect the privacy of the citizens of said country. In Canada it's refereed to as the Privacy Act. With respect to digital information in Canada there exists a separate act refereed to as PIPEDA ii . With respect to the operations and storage of personally identifiable information, if a company does not take “due care” to protect said information they may end up getting sued by the Crown in Canada for a gross violation of the act; within industry this is known as ...

According to the ISC^2 under the information security governance and risk management section of the common body of knowledge there exist a number of rules regarding the ISC^2 code of ethics i ; “ The no free lunch rule” - “Assume that all information and property belongs to someone.” ComScore states that e-commerce spending neared 34 billion dollars in the first quarter of 2010 ii . Of the 256,000,000 websites on-line iii ; as of 2007 there were 20,000,000 using php this is of 102,400,000 total domains at the time iv . If we assume these trends have remained constant then we may extrapolate that around 35% to 50% of all web-sites on-line use php scripting v . The TIOBE index for 2010 states that PHP falls just behind C/C++, and JAVA in popularity vi . Most companies which engage programmers to develop applications for them retain intellectual property rights vii . These rights and applications are the tools used to extract value from eCommerce. Web development by it's very nat...

Object Oriented Programming has many benefits, the primary of which is object re-use. i Object reuse is the primary reason application programming languages such as Java and C/C++ dominate the web and platform development industry. Object reuse allows the evolution of data-structures and forms in a manner as to reduce the overall time required and increase the reliability of a given application whilst compartmentalizing and simplifying the development process, this in turn reduces development costs allowing businesses to achieve quantifiable results faster. The Document Object Model (DOM) ii , is a language neutral interface that allows Javascript, XHTML and DHTML to function in a uniform manner regardless of platform or hosting infrastructure; they are expected to play well together anywhere. The great possibilities for Java-script objects are those that have been developed and used by companies such as Amazon, they awarded a famous patent for “1-click” purchases. iii This 1-cli...

Traditional Worlkflows have been used by operations management and business for decades. Current standard business workflows have included e-mail, web queries, e-Commerce and transactions these exist in addition to traditional business methods such as process and operations management. [i] Web based businesses use the INTERNET to conduct business, as such the only available method to  collect, verify and maintain customer relationships is using transaction based e-mail and web-forms to generate both direct sales and sales potentials, these functions form the basis of ERP, CRM, and ecommerce industries. Data collection is the starting point for ecommerce based businesses, once collected data and information is gathered then this data and it’s use must be regulated to local laws and regulations. These include maintaining corporate policies that meet local regulations for any country of operations. The ISO series of policies (22307:2008 and 27002) [ii] The webform will initiate t...

The impact of increased availability of all human knowledge on the internet is only begging to be felt by modern society now.   Ray Kurtzweil refers to the advance and paradigm shift of the internet containing all human knowledge as the “Singularity”; it is defined as a point in time in the near future where machines will have greater intelligence then their human masters. [i] The primary example of H.G. Wells oracle from the time machine can be seen in Wikipedia directly; this and the Web 2.0 standard where the machines may now understand the content and data presented via HTML 4.2 and HTML 5.0 standards; this results in the ability for anyone with an internet connection to have access to the “Sum of all Knowledge”; the result of this is the “Law of Accelerating Returns” [ii] , where technologies not previously related to the internet maintain rapid returns and breakthroughs with respect to innovation. Some brief examples of rapid technological evolution include computers and ...

The deep web and its impact in relation to search engines, academia and commercial sites can be summarized by the presence of new commercial products aimed directly at the information management sector. The issue of the deep web is that the various commercial bodies that contribute to the internet at large also maintain large repositories of competitive knowledge or repositories that have no external links or connections; this may be defined as a collection of “Trade Secrets” and “Information”; the primary example would be the recipe for fries at McDonalds.   You’ll see the nutritional make up of fries on McDonalds web site; you’d be hard pressed to find the details of they’re fabrication anywhere. These commercial bodies will engage in public or semi-public communication with their commercial parterres via the internet; but just as all radio communications is not for public consumption [i] , neither are all web-servers. Michal K. Bergman wrote: “Traditional search engines create...